Bump protobuf-bom from 3.9.1 to 3.10.0

[dependabot-preview]

Bumps protobuf-bom from 3.9.1 to 3.10.0.

Release notes

Sourced from protobuf-bom's releases.

Protocol Buffers v3.10.0-rc1

C++

• Switch the proto parser to the faster MOMI parser.
• Properly escape Struct keys in the proto3 JSON serializer.
• Fix crash on uninitialized map entries.
• Informed the compiler of has-bit invariant to produce better code
• Unused imports of files defining descriptor extensions will now be reported
• Add proto2::util::RemoveSubranges to remove multiple subranges in linear time.
• Added BaseTextGenerator::GetCurrentIndentationSize()
• Made implicit weak fields compatible with the Apple linker
• Support 32 bit values for ProtoStreamObjectWriter to Struct.
• Removed the internal-only header coded_stream_inl.h and the internal-only methods defined there.
• Enforced no SWIG wrapping of descriptor_database.h (other headers already had this restriction).
• Implementation of the equivalent of the MOMI parser for serialization. This removes one of the two serialization routines, by making the fast array serialization routine completely general. SerializeToCodedStream can now be implemented in terms of the much much faster array serialization. The array serialization regresses slightly, but when array serialization is not possible this wins big.
• Do not convert unknown field name to snake case to accurately report error.
• Fix a UBSAN warnings. (#6333)
• Add podspec for C++ (#6404)
• protoc: fix source code info location for missing label (#6436)
• C++ Add move constructor for Reflection's SetString (#6477)

Java

• Call loadDescriptor outside of synchronized block to remove one possible source of deadlock.
• Have oneof enums implement a separate interface (other than EnumLite) for clarity.
• Opensource Android Memory Accessors
• Update TextFormat to make use of the new TypeRegistry.
• Support getFieldBuilder and getRepeatedFieldBuilder in ExtendableBuilder
• Update JsonFormat to make use of the new TypeRegistry.
• Add proguard config generator for GmmBenchmarkSuiteLite.
• Change ProtobufArrayList to use Object[] instead of ArrayList for 5-10% faster parsing
• Implement ProtobufArrayList.add(E) for 20% (5%-40%) faster overall protolite2 parsing
• Make a copy of JsonFormat.TypeRegistry at the protobuf top level package. This will eventually replace JsonFormat.TypeRegistry.
• Fix javadoc warnings in generated files (#6231)
• Java: Add Automatic-Module-Name entries to the Manifest (#6568)

Python

• Add descriptor methods in descriptor_pool are deprecated.
• Uses explicit imports to prevent multithread test failures in py3.
• Added delitem for Python extension dict
• Update six version to 1.12.0 and fix legacy_create_init issue (#6391)

JavaScript

• Remove deprecated boolean option to getResultBase64String().
• Fix sint64 zig-zag encoding.
• Simplify hash64 string conversion to avoid DIGIT array. Should reduce overhead if these functions aren't used, and be more efficient by avoiding linear array searches.
• Change the parameter types of binaryReaderFn in ExtensionFieldBinaryInfo to (number, ?, ?).
• Create dates.ts and time_of_days.ts to mirror Java versions. This is a near-identical conversion of c.g.type.util.{Dates,TimeOfDays} respectively.
• Migrate moneys to TypeScript.

Ruby

• Fix scope resolution for Google namespace (#5878)

... (truncated)

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
• @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

• Update frequency (including time of day and day of week)
• Pull request limits (per update run and/or open at any time)
• Automerge options (never/patch/minor, and dev/runtime dependencies)
• Out-of-range updates (receive only lockfile updates, if desired)
• Security updates (receive only security updates, if desired)

Finally, you can contact us by mentioning @dependabot.

[pivotal-issuemaster]

@dependabot-preview[bot] Please sign the Contributor License Agreement!

Click here to manually synchronize the status of this Pull Request.

See the FAQ for frequently asked questions.

[pivotal-issuemaster]

@dependabot-preview[bot] Please sign the Contributor License Agreement!

Click here to manually synchronize the status of this Pull Request.

See the FAQ for frequently asked questions.

[pivotal-issuemaster]

@dependabot-preview[bot] Please sign the Contributor License Agreement!

Click here to manually synchronize the status of this Pull Request.

See the FAQ for frequently asked questions.